@quatronic/qore 0.1.6 → 0.1.7

package/README.md

@@ -23,6 +23,11 @@ qore version            # CLI + portal version info
 
 qore env pull           # write this module's local secrets into an env file
 qore run -- <command>   # run a command with those secrets in its environment
+
+qore errors --env stag                              # recent unresolved errors
+qore errors FRONTEND-1A --env prod --with trace,logs  # one error, its trace and logs
+qore traces --env stag --slower-than 1s             # slow requests
+qore logs --env stag --level error                  # error logs
 ```
 
 ### Portals
@@ -57,6 +62,12 @@ current directory. `qore env pull --project` writes into the located module,
 and a relative `--target` then resolves against that project directory, not
 the directory you ran it from.
 
+A repository that is no module counts as outside one: standing in some other
+codebase, `qore dev` asks the portal about its remotes and, when they match no
+module (or it has no remote Qore can match), offers your projects just the
+same. A repository inside a known project is never asked about, and a portal
+that cannot answer keeps today's error.
+
 Logged out with a projects folder set, the local lookup still runs first: a
 folder that holds no projects gives `QORE_PROJECT_NOT_FOUND`; otherwise the
 project is located exactly as when logged in (a match, a picker, or

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="28c91dc8-dbb9-5c0a-91e3-f368931a4ed3")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="bf813c0e-4054-532d-9e74-62fbe8673876")}catch(e){}}();
 import { createRequire as __qoreCreateRequire } from "node:module"; const require = __qoreCreateRequire(import.meta.url);
 import {
   addSecretValues,
@@ -538,8 +538,8 @@ async function fetchMetaWithDate(fetch3, apiOrigin) {
   }
   if (!res.ok) throw await problemToError(res);
   const header = res.headers.get("date");
-  const ms = header ? Date.parse(header) : NaN;
-  return { meta: await res.json(), date: Number.isNaN(ms) ? null : new Date(ms) };
+  const ms2 = header ? Date.parse(header) : NaN;
+  return { meta: await res.json(), date: Number.isNaN(ms2) ? null : new Date(ms2) };
 }
 function negotiate(meta, portal, cliVersion) {
   if (portal.pinnedIssuer && meta.auth.issuer !== portal.pinnedIssuer) {
@@ -678,7 +678,7 @@ var QoreApiClient = class {
     this.o.onRequest?.(`${method} ${path} \u2192 ${res.status}${rid ? ` (${rid})` : ""}`);
     return res;
   }
-  async request(method, path, body) {
+  async request(method, path, body, parse2 = (r) => r.json()) {
     let res = await this.once(method, path, body, false);
     if (res.status === 401) {
       res = await this.once(method, path, body, true);
@@ -700,11 +700,14 @@ var QoreApiClient = class {
       }
     }
     if (!res.ok) throw await problemToError(res);
-    return await res.json();
+    return parse2(res);
   }
   get(path) {
     return this.request("GET", path);
   }
+  getText(path) {
+    return this.request("GET", path, void 0, (r) => r.text());
+  }
   post(path, body) {
     return this.request("POST", path, body);
   }
@@ -720,13 +723,13 @@ var RefreshCoordinator = class {
   fresh(expiresAt) {
     return new Date(expiresAt).getTime() - this.o.now().getTime() > SKEW_MS;
   }
-  async rotate(scope) {
+  async rotate(scope2) {
     let stored = await this.o.store.getRefresh();
     if (!stored) throw new QoreError("QORE_NOT_LOGGED_IN", "Not logged in", { hint: "Run `qore login`." });
     let t;
     for (let attempt = 0; ; attempt++) {
       try {
-        t = await (await this.o.oidc()).refresh(stored.rt, scope);
+        t = await (await this.o.oidc()).refresh(stored.rt, scope2);
         break;
       } catch (e) {
         if (!(e instanceof QoreError && e.code === "QORE_SESSION_EXPIRED")) throw e;
@@ -742,7 +745,7 @@ var RefreshCoordinator = class {
         throw e;
       }
     }
-    await this.o.store.setRefresh({ rt: t.refreshToken, sub: t.sub, scope: t.scope || (scope ?? stored.scope), obtainedAt: this.o.now().toISOString() });
+    await this.o.store.setRefresh({ rt: t.refreshToken, sub: t.sub, scope: t.scope || (scope2 ?? stored.scope), obtainedAt: this.o.now().toISOString() });
     return t;
   }
   async accessToken(opts = {}) {
@@ -2125,6 +2128,7 @@ async function anyLoggedIn(deps2, cfg) {
   }
   return false;
 }
+var isForeignRepo = (e) => e instanceof QoreError && e.code === "QORE_CONTEXT_REQUIRED" && e.details?.foreignRepo === true;
 async function resolveModuleContext(deps2, o) {
   const cache = new ResolutionCache(join11(deps2.config.dir, "cache"), deps2.now);
   const ws = await findWorkspace(deps2.cwd, deps2.home);
@@ -2143,7 +2147,7 @@ async function resolveModuleContext(deps2, o) {
     const said = gitError?.hint;
     throw new QoreError("QORE_CONTEXT_REQUIRED", "This repository has no remote Qore can match", {
       hint: said ? `${HINT_FLAG} git said: ${said}` : HINT_FLAG,
-      details: gitError ? { git: said ?? gitError.message } : void 0,
+      details: gitError ? { git: said ?? gitError.message } : { foreignRepo: true },
       cause: gitError
     });
   }
@@ -2172,6 +2176,7 @@ async function resolveModuleContext(deps2, o) {
   }
   const details = { triedProfiles: tried };
   if (skipped.length > 0) details.skippedProfiles = skipped;
+  if (answered.length > 0) details.foreignRepo = true;
   if (answered.length === 0) {
     const cause = skipErrors[0] ?? unsupported2;
     if (cause) throw withDetails(cause, details);
@@ -2579,7 +2584,7 @@ function notClonedReason(m, am) {
 }
 
 // src/core/dev/findings.ts
-var plural = (n, one, many) => n === 1 ? one : many;
+var plural = (n, one2, many) => n === 1 ? one2 : many;
 function modulesMissing(o) {
   const actionFor = new Map(o.actions.map((a) => [a.module.slug, a]));
   const findings = [];
@@ -2869,7 +2874,7 @@ function nodeVersionError(found, range, slug) {
 // src/core/dev/preflight.ts
 var pmMajor = (v) => v ? v.split(".")[0] : "latest";
 var GRACE_MS = 1e4;
-var secs = (ms) => `${Math.round(ms / 1e3)} s`;
+var secs = (ms2) => `${Math.round(ms2 / 1e3)} s`;
 async function runTool(deps2, cmd, args, o) {
   if (o.signal.aborted) throw new CancelledError();
   const tail = [];
@@ -3057,13 +3062,13 @@ async function checkPort(deps2, o) {
   throw await portInUseError(deps2, { slug: o.slug, port: o.port, key: o.key, runs: o.runs });
 }
 function abortableDelay(signal) {
-  return (ms) => new Promise((resolve6) => {
+  return (ms2) => new Promise((resolve6) => {
     const done = () => {
       clearTimeout(t);
       signal.removeEventListener("abort", done);
       resolve6();
     };
-    const t = setTimeout(done, ms);
+    const t = setTimeout(done, ms2);
     signal.addEventListener("abort", done, { once: true });
   });
 }
@@ -3210,10 +3215,20 @@ var isDir = async (p) => (await stat4(p).catch(() => null))?.isDirectory() ?? fa
 var label2 = (p) => `${p.tenantSlug} / ${p.appSlug}${p.kind === "module" ? ` / ${p.moduleSlug}` : ""}${p.source === "registry" ? `  (${p.path})` : ""}`;
 var candidate = (p) => p.kind === "module" ? { kind: "module", id: p.moduleId, slug: p.moduleSlug, tenant: p.tenantSlug, name: p.path } : { kind: "app", slug: p.appSlug, tenant: p.tenantSlug, name: p.path };
 var withCwd = (ctx, cwd) => ({ ...ctx, deps: { ...ctx.deps, cwd } });
-async function inProject(ctx) {
-  if (await findWorkspace(ctx.deps.cwd, ctx.deps.home)) return true;
+async function standingIn(ctx) {
+  if (await findWorkspace(ctx.deps.cwd, ctx.deps.home)) return "workspace";
   const repo = await findRepoRoot(ctx.deps.cwd);
-  return repo !== null && !isInside(repo, ctx.deps.home);
+  return repo !== null && !isInside(repo, ctx.deps.home) ? { repo } : null;
+}
+async function isForeign(ctx, command) {
+  const g = ctx.opts();
+  try {
+    await resolveModuleContext(ctx.deps, { portal: g.portal, command, onRequest: g.verbose ? (l) => ctx.io.err(l) : void 0 });
+    return false;
+  } catch (e) {
+    if (e instanceof CancelledError) throw e;
+    return isForeignRepo(e);
+  }
 }
 async function moduleDirs(wsPath) {
   const out = [];
@@ -3288,8 +3303,11 @@ async function projectCtx(ctx, o) {
     const m2 = await choose(ctx, await liveMatches(matches), `"${o.ref}" matches several projects`, true);
     return relocate(ctx, await pathFor(ctx, m2, o.needModule));
   }
-  if (o.module || o.app || await inProject(ctx)) return ctx;
+  if (o.module || o.app) return ctx;
+  const here = await standingIn(ctx);
+  if (here === "workspace") return ctx;
   const known = await knownProjects(ctx.deps, { portal });
+  if (here && (known.length === 0 || known.some((p) => isInside(p.path, here.repo)) || !await isForeign(ctx, o.command ?? "project"))) return ctx;
   if (known.length === 0) {
     if (!cfg.projectsRoot) {
       if (!await loggedInAs(ctx)) return ctx;
@@ -3301,7 +3319,8 @@ async function projectCtx(ctx, o) {
       hint: "Run `qore clone <app>`."
     });
   }
-  const m = await choose(ctx, known.map((project) => ({ project })), "Not inside a project \u2014 which one?", false);
+  const what = here ? "This repository is not a Qore module \u2014 which project?" : "Not inside a project \u2014 which one?";
+  const m = await choose(ctx, known.map((project) => ({ project })), what, false);
   return relocate(ctx, await pathFor(ctx, m, o.needModule));
 }
 function relocate(ctx, path) {
@@ -3342,6 +3361,10 @@ async function rememberWorkspace(ctx, ws, app) {
 
 // src/cli/context.ts
 var allOfKind = (c, kind) => !!c && c.length > 0 && c.every((x) => x.kind === kind && typeof x.id === "string");
+async function pick(ctx, err, message, choices) {
+  if (!ctx.io.interactive) throw err;
+  return ctx.io.select(message, choices);
+}
 async function moduleContextFor(ctx, flags, command) {
   const g = ctx.opts();
   const onRequest = g.verbose ? (l) => ctx.io.err(l) : void 0;
@@ -3351,14 +3374,16 @@ async function moduleContextFor(ctx, flags, command) {
   } catch (e) {
     if (!(e instanceof QoreError) || e.code !== "QORE_CONTEXT_REQUIRED" || !ctx.io.interactive) throw e;
     if (allOfKind(e.candidates, "module")) {
-      const choose2 = await ctx.io.select(
+      const choose2 = await pick(
+        ctx,
+        e,
         "Select a module",
         e.candidates.map((c) => ({ name: `${c.tenant ? `${c.tenant} / ` : ""}${c.slug}  (${c.remote})`, value: c.id }))
       );
       return resolveModuleContext(ctx.deps, { ...base, choose: choose2 });
     }
     if (allOfKind(e.candidates, "tenant")) {
-      const tenant = await ctx.io.select("Select a tenant", e.candidates.map((c) => ({ name: c.name ?? c.slug, value: c.id })));
+      const tenant = await pick(ctx, e, "Select a tenant", e.candidates.map((c) => ({ name: c.name ?? c.slug, value: c.id })));
       return resolveModuleContext(ctx.deps, { ...base, tenant });
     }
     throw e;
@@ -3369,7 +3394,7 @@ async function appFor(ctx, mc, app) {
     return pickApp2(mc, app);
   } catch (e) {
     if (!(e instanceof QoreError) || e.code !== "QORE_APP_AMBIGUOUS" || !ctx.io.interactive) throw e;
-    const id = await ctx.io.select("Select an app", mc.module.apps.map((a) => ({ name: a.name, value: a.id })));
+    const id = await pick(ctx, e, "Select an app", mc.module.apps.map((a) => ({ name: a.name, value: a.id })));
     return pickApp2(mc, id);
   }
 }
@@ -3701,8 +3726,8 @@ function exitCode(e) {
 }
 function supervise(o) {
   const now = o.now ?? Date.now;
-  const delay = o.delay ?? ((ms) => new Promise((r) => {
-    setTimeout(r, ms).unref();
+  const delay = o.delay ?? ((ms2) => new Promise((r) => {
+    setTimeout(r, ms2).unref();
   }));
   const abort = new AbortController();
   const emit = (e) => {
@@ -3880,7 +3905,7 @@ function registerRun(program, ctx) {
         hint: "Drop --json; the child's own output passes through."
       });
     }
-    const c = await projectCtx(ctx, { ref: f.project, module: f.module, app: f.app, needModule: true });
+    const c = await projectCtx(ctx, { ref: f.project, module: f.module, app: f.app, needModule: true, command: "run" });
     const { deps: deps2 } = c;
     const mc = await moduleContextFor(c, f, "run");
     const app = await appFor(c, mc, f.app);
@@ -4410,7 +4435,7 @@ function registerDev(program, ctx) {
         hint: "qore dev <project> | qore dev --project <project>"
       });
     }
-    const c = await projectCtx(ctx, { ref: project ?? f.project, module: f.module, app: f.app, needModule: false });
+    const c = await projectCtx(ctx, { ref: project ?? f.project, module: f.module, app: f.app, needModule: false, command: "dev" });
     const ws = await workspaceRoot(c.deps);
     if (ws && f.module === void 0) return workspaceDev(c, ws, f, waitTimeout);
     return moduleDev(c, f, waitTimeout);
@@ -4515,9 +4540,9 @@ async function moduleDev(ctx, f, waitTimeout) {
     childRunning.current = false;
     await removeRunFile(deps2, root);
   }
-  const ms = deps2.now().getTime() - startedAt.getTime();
+  const ms2 = deps2.now().getTime() - startedAt.getTime();
   if (exit.code !== 0 && exit.signal === null) {
-    io2.err(ms < EARLY_EXIT_MS ? `\u2717 ${slug} exited after ${Math.round(ms / 1e3)} s with code ${exit.code ?? 1} \u2014 its output above says why.` : `\u2717 ${slug} exited with code ${exit.code ?? 1}.`);
+    io2.err(ms2 < EARLY_EXIT_MS ? `\u2717 ${slug} exited after ${Math.round(ms2 / 1e3)} s with code ${exit.code ?? 1} \u2014 its output above says why.` : `\u2717 ${slug} exited with code ${exit.code ?? 1}.`);
     const hint = exitHint(tee.lines(), hintContext(recipe, pkg, devEnv2));
     if (hint) io2.err(`  \u2192 ${hint.hint}`);
   }
@@ -4698,19 +4723,19 @@ var withError = (status2, label3, e) => ({ status: status2, label: label3, error
 var isCancel = (e, signal) => e instanceof CancelledError || signal.aborted;
 var portalLabel = (p) => p.builtin ?? p.apiOrigin;
 var ToolTimeout = class extends Error {
-  constructor(tool, ms) {
-    super(`${tool} did not answer within ${Math.round(ms / 1e3)} s`);
+  constructor(tool, ms2) {
+    super(`${tool} did not answer within ${Math.round(ms2 / 1e3)} s`);
     this.tool = tool;
-    this.ms = ms;
+    this.ms = ms2;
   }
   tool;
   ms;
 };
-async function timed(tool, signal, ms, fn) {
+async function timed(tool, signal, ms2, fn) {
   try {
-    return await fn(AbortSignal.any([signal, AbortSignal.timeout(ms)]));
+    return await fn(AbortSignal.any([signal, AbortSignal.timeout(ms2)]));
   } catch (e) {
-    if (e instanceof CancelledError && !signal.aborted) throw new ToolTimeout(tool, ms);
+    if (e instanceof CancelledError && !signal.aborted) throw new ToolTimeout(tool, ms2);
     throw e;
   }
 }
@@ -4741,8 +4766,8 @@ function checkOwnNode(deps2) {
   }
   return ok(`Node ${v} (\u226522 required)`);
 }
-async function checkGit(deps2, signal, ms) {
-  const res = await timed("git", signal, ms, (s) => runTool(deps2, "git", ["--version"], { cwd: deps2.home, env: deps2.env, onLine: noop, signal: s }));
+async function checkGit(deps2, signal, ms2) {
+  const res = await timed("git", signal, ms2, (s) => runTool(deps2, "git", ["--version"], { cwd: deps2.home, env: deps2.env, onLine: noop, signal: s }));
   if (res.spawnError === "ENOENT") {
     const e = new QoreError("QORE_GIT_UNAVAILABLE", "git is not installed or not on PATH", {
       hint: "Install git (https://git-scm.com/downloads) and open a new terminal."
@@ -4756,14 +4781,14 @@ async function checkGit(deps2, signal, ms) {
   const m = /git version (\d+)\.(\d+)/.exec(res.tail.join("\n"));
   return ok(m ? `git ${m[1]}.${m[2]}` : "git");
 }
-async function checkGithubSsh(deps2, signal, ms) {
-  const res = await timed("ssh", signal, ms, (s) => runTool(deps2, "ssh", SSH_TEST_ARGS, { cwd: deps2.home, env: deps2.env, onLine: noop, signal: s }));
+async function checkGithubSsh(deps2, signal, ms2) {
+  const res = await timed("ssh", signal, ms2, (s) => runTool(deps2, "ssh", SSH_TEST_ARGS, { cwd: deps2.home, env: deps2.env, onLine: noop, signal: s }));
   const r = classifySshTest(res);
   if (r.ok) return ok(`GitHub SSH ok (${r.user})`, { user: r.user });
   return withError("warn", `GitHub SSH: ${r.error.message} (https still works)`, r.error);
 }
-async function checkDocker(deps2, signal, ms) {
-  return timed("docker", signal, ms, async (s) => {
+async function checkDocker(deps2, signal, ms2) {
+  return timed("docker", signal, ms2, async (s) => {
     const o = { cwd: deps2.home, env: deps2.env, onLine: noop, signal: s };
     const info = await runTool(deps2, "docker", ["info", "--format", "{{.ServerVersion}}"], o);
     const infoErr = classifyDockerInfo(info, deps2.platform);
@@ -4895,16 +4920,16 @@ function runsAt(deps2, root) {
   return () => p ??= leftoverRun(deps2, root, { prune: false }).then((r) => r ? [r] : []);
 }
 var UNTRUSTED = { status: "warn", label: "not checked (repository not trusted)" };
-async function checkRepoPm(deps2, m, recipe, signal, ms) {
+async function checkRepoPm(deps2, m, recipe, signal, ms2) {
   if (!await isTrusted(deps2, m.root, m.id)) return UNTRUSTED;
-  const found = await timed(recipe.pm.name, signal, ms, (s) => checkPackageManager(deps2, recipe, noop, s));
+  const found = await timed(recipe.pm.name, signal, ms2, (s) => checkPackageManager(deps2, recipe, noop, s));
   const { name, version } = recipe.pm;
   if (found === null) return ok(`${name} (version unknown)`);
   return ok(version ? `${name} ${found} (matches)` : `${name} ${found}`, { found, ...version ? { pinned: version } : {} });
 }
-async function checkRepoNode(deps2, m, recipe, pkg, signal, ms) {
+async function checkRepoNode(deps2, m, recipe, pkg, signal, ms2) {
   if (!await isTrusted(deps2, m.root, m.id)) return UNTRUSTED;
-  const found = await timed("node", signal, ms, (s) => checkNode(deps2, recipe, pkg, m.slug, s));
+  const found = await timed("node", signal, ms2, (s) => checkNode(deps2, recipe, pkg, m.slug, s));
   return ok(`Node ${found ?? "?"} (engines ${pkg.engines.node})`);
 }
 async function loggedInPortals(deps2, profiles) {
@@ -5122,7 +5147,7 @@ var maskLen = (v) => v === void 0 ? "(unset)" : `\u2022\u2022\u2022\u2022 (${v.l
 function registerEnv(program, ctx) {
   const env = program.command("env").description("Local environment");
   env.command("pull").description("Write this module's local secrets into its env file").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").option("--project <ref>", "the project to pull for, from anywhere (see qore init)").option("--target <path>", "env file to write (inside the repository)").option("--use-portal", "take the portal's value for keys that differ locally").option("--yes", "trust this repository without asking").action(async (f) => {
-    const c = await projectCtx(ctx, { ref: f.project, module: f.module, app: f.app, needModule: true });
+    const c = await projectCtx(ctx, { ref: f.project, module: f.module, app: f.app, needModule: true, command: "env pull" });
     const { deps: deps2, io: io2 } = c;
     const g = c.opts();
     const mc = await moduleContextFor(c, f, "env pull");
@@ -5157,7 +5182,7 @@ function registerEnv(program, ctx) {
           choices[key] = bulk;
           continue;
         }
-        const pick = await io2.select(
+        const pick2 = await io2.select(
           `${key} differs  (local ${maskLen(current.get(key))}, portal ${maskLen(local.env[key])})`,
           [
             { name: "keep local", value: "keep" },
@@ -5166,9 +5191,9 @@ function registerEnv(program, ctx) {
             { name: "keep local for all", value: "skip" }
           ]
         );
-        if (pick === "all") bulk = "use-portal";
-        if (pick === "skip") bulk = "keep";
-        choices[key] = pick === "portal" || pick === "all" ? "use-portal" : "keep";
+        if (pick2 === "all") bulk = "use-portal";
+        if (pick2 === "skip") bulk = "keep";
+        choices[key] = pick2 === "portal" || pick2 === "all" ? "use-portal" : "keep";
       }
       plan = planPull({ ...inputs, choices });
     }
@@ -5206,12 +5231,486 @@ function registerEnv(program, ctx) {
   });
 }
 
+// src/core/observability/compose.ts
+function pageWarnings(...pages) {
+  return pages.some((p) => p.ingestPaused) ? ["ingest_paused"] : [];
+}
+function scope(q) {
+  const s = { env: q.env };
+  if (q.since !== void 0) s.since = q.since;
+  if (q.start !== void 0) s.start = q.start;
+  if (q.end !== void 0) s.end = q.end;
+  return s;
+}
+async function errorDetail(c, id, q, withs) {
+  const w = scope(q);
+  const markdown = await c.issueMarkdown(id, w);
+  const event = await c.issueEvent(id, w);
+  const out = { issue: { markdown, event }, warnings: [] };
+  if (withs.size === 0) return out;
+  if (!event.traceId) {
+    out.warnings.push("no_trace_id");
+    return out;
+  }
+  if (withs.has("trace")) out.trace = await c.trace(event.traceId, w);
+  if (withs.has("logs")) {
+    const logs = await c.logs({ ...w, trace: event.traceId, limit: 100 });
+    out.logs = logs.items;
+    out.warnings.push(...pageWarnings(logs));
+  }
+  return out;
+}
+async function traceDetail(c, id, q, withs) {
+  const w = scope(q);
+  const out = { trace: await c.trace(id, w), warnings: [] };
+  const pages = [];
+  if (withs.has("logs")) {
+    const p = await c.logs({ ...w, trace: id, limit: 100 });
+    out.logs = p.items;
+    pages.push(p);
+  }
+  if (withs.has("errors")) {
+    const p = await c.issues({ ...w, trace: id, status: "all" });
+    out.errors = p.items;
+    pages.push(p);
+  }
+  out.warnings.push(...pageWarnings(...pages));
+  return out;
+}
+
+// src/core/observability/client.ts
+var MAX_RETRY_WAIT_S = 30;
+var NOT_PROVISIONED = "observability_not_provisioned";
+var wait = (ms2) => new Promise((r) => setTimeout(r, ms2));
+var ObsClient = class {
+  constructor(api, moduleId, sleep = wait, slug = moduleId) {
+    this.api = api;
+    this.moduleId = moduleId;
+    this.sleep = sleep;
+    this.slug = slug;
+  }
+  api;
+  moduleId;
+  sleep;
+  slug;
+  path(resource, o, extra = {}) {
+    const p = new URLSearchParams();
+    const all = { env: o.env, since: o.since, start: o.start, end: o.end, q: o.q, limit: o.limit, ...extra };
+    for (const [k, v] of Object.entries(all)) if (v !== void 0 && v !== "") p.set(k, String(v));
+    return `/api/cli/v1/modules/${encodeURIComponent(this.moduleId)}/observability/${resource}?${p}`;
+  }
+  async call(fn) {
+    try {
+      return await this.retryOnce(fn);
+    } catch (e) {
+      if (e instanceof QoreError && e.code === "QORE_ACCESS_DENIED" && e.serverCode === "auth.scope.insufficient") {
+        throw new QoreError("QORE_ACCESS_DENIED", "This login predates `qore errors/traces/logs`", {
+          hint: "Run `qore login` again.",
+          status: e.status,
+          requestId: e.requestId,
+          serverCode: e.serverCode
+        });
+      }
+      if (e instanceof QoreError && e.serverCode === NOT_PROVISIONED) {
+        throw new QoreError("QORE_RESOURCE_NOT_FOUND", `Module "${this.slug}" does not report to Sentry yet`, {
+          hint: "Its Sentry project is not provisioned; pick another module with --module.",
+          status: e.status,
+          requestId: e.requestId,
+          serverCode: e.serverCode,
+          details: e.details
+        });
+      }
+      throw e;
+    }
+  }
+  async retryOnce(fn) {
+    try {
+      return await fn();
+    } catch (e) {
+      if (!(e instanceof QoreError) || e.code !== "QORE_RATE_LIMITED") throw e;
+      const secs2 = typeof e.details?.retryAfter === "number" ? e.details.retryAfter : 1;
+      await this.sleep(Math.min(secs2, MAX_RETRY_WAIT_S) * 1e3);
+      return fn();
+    }
+  }
+  issues(o) {
+    return this.call(() => this.api.get(this.path("issues", o, { status: o.status, sort: o.sort, trace: o.trace })));
+  }
+  issueMarkdown(id, o) {
+    return this.call(() => this.api.getText(this.path(`issues/${encodeURIComponent(id)}/markdown`, { env: o.env, since: o.since, start: o.start, end: o.end }, { event: "recommended" })));
+  }
+  issueEvent(id, o) {
+    return this.call(() => this.api.get(this.path(`issues/${encodeURIComponent(id)}/events/recommended`, { env: o.env, since: o.since, start: o.start, end: o.end })));
+  }
+  logs(o) {
+    return this.call(() => this.api.get(this.path("logs", o, { level: o.level, trace: o.trace })));
+  }
+  spans(o) {
+    return this.call(() => this.api.get(this.path("spans", o, { sort: o.sort })));
+  }
+  trace(id, o) {
+    return this.call(() => this.api.get(this.path(`traces/${encodeURIComponent(id)}`, { env: o.env, since: o.since, start: o.start, end: o.end })));
+  }
+};
+
+// src/core/observability/query.ts
+var ROOT_SPAN_FILTER = "is_transaction:true";
+var DURATION = /^\d{1,6}(ms|s|m)$/;
+var SINCE = /^(\d{1,4})([mhdw])$/;
+var SECONDS = { m: 60, h: 3600, d: 86400, w: 604800 };
+function parseDuration(s) {
+  if (!DURATION.test(s)) throw new QoreError("QORE_CONTEXT_INVALID", `"${s}" is not a duration`, { hint: "Use e.g. 500ms, 1s or 2m." });
+  return s;
+}
+function parseSince(s) {
+  const m = SINCE.exec(s);
+  if (!m || Number(m[1]) * SECONDS[m[2]] > 90 * 86400) {
+    throw new QoreError("QORE_CONTEXT_INVALID", `"${s}" is not a time window`, { hint: "Use a count plus m, h, d or w, at most 90 days (e.g. 24h, 7d)." });
+  }
+  return s;
+}
+function joinQuery(...parts) {
+  const q = parts.filter((p) => typeof p === "string" && p.length > 0).join(" ");
+  return q || void 0;
+}
+
+// src/cli/observability/context.ts
+var ALL = { kind: "module", slug: "all", name: "All modules" };
+var modCandidates = (mods, withAll) => [...mods.map((m) => ({ kind: "module", id: m.id, slug: m.slug, name: m.name })), ...withAll ? [ALL] : []];
+function withRepo(mods) {
+  const r = mods.filter((m) => m.repoUrl !== null);
+  if (r.length === 0) throw new QoreError("QORE_RESOURCE_NOT_FOUND", "No modules with a repository in this app");
+  return r;
+}
+function windowOf(f) {
+  if (Boolean(f.start) !== Boolean(f.end)) throw new QoreError("QORE_CONTEXT_INVALID", "--start and --end go together; pass both");
+  if (f.start || f.end) return { start: f.start, end: f.end };
+  return { since: parseSince(f.since ?? "24h") };
+}
+var windowText = (w) => w.since ? `last ${w.since}` : `${w.start ?? "\u2026"} \u2013 ${w.end ?? "now"}`;
+async function chooseModule(ctx, mods, flag, single) {
+  if (flag === "all" && !single) return mods;
+  if (flag && flag !== "all") {
+    const m = mods.find((x) => x.slug === flag || x.id === flag);
+    if (m) return [m];
+    throw new QoreError("QORE_CONTEXT_REQUIRED", `No module "${flag}" in this app`, { candidates: modCandidates(mods, !single) });
+  }
+  const err = new QoreError(
+    "QORE_CONTEXT_REQUIRED",
+    single && flag === "all" ? "A detail view needs one module" : "Which module?",
+    { candidates: modCandidates(mods, !single), hint: "Pass --module <slug>" + (single ? "." : " or --module all.") }
+  );
+  if (flag === "all") throw err;
+  const choice = await pick(
+    ctx,
+    err,
+    "Select a module",
+    [...mods.map((m) => ({ name: m.slug, value: m.id })), ...single ? [] : [{ name: "All modules", value: "all" }]]
+  );
+  return choice === "all" ? mods : mods.filter((m) => m.id === choice);
+}
+async function chooseEnv(ctx, api, moduleId, appId, flag) {
+  const st = await api.get(`/api/cli/v1/modules/${encodeURIComponent(moduleId)}/status?app_id=${encodeURIComponent(appId)}`);
+  const names = st.environments.map((e) => e.name);
+  if (names.length === 0) throw new QoreError("QORE_RESOURCE_NOT_FOUND", "No environments yet");
+  const candidates = names.map((n) => ({ kind: "env", slug: n }));
+  if (flag) {
+    if (names.includes(flag)) return flag;
+    throw new QoreError("QORE_CONTEXT_REQUIRED", `Unknown environment "${flag}"`, { candidates, hint: `Pass --env ${names.join("|")}.` });
+  }
+  const err = new QoreError("QORE_CONTEXT_REQUIRED", "Which environment?", { candidates, hint: `Pass --env ${names.join("|")}.` });
+  return pick(ctx, err, "Select an environment", names.map((n) => ({ name: n, value: n })));
+}
+async function obsContext(ctx, flags, command, o) {
+  const { deps: deps2, io: io2 } = ctx;
+  const g = ctx.opts();
+  const window = windowOf(flags);
+  const onRequest = g.verbose ? (l) => io2.err(l) : void 0;
+  const ws = flags.module === void 0 || flags.module === "all" ? await workspaceRoot(deps2) : null;
+  let api, tenant, app, mods, base, apiOrigin;
+  if (ws) {
+    const portal = await flagPortal(deps2, g.portal, ws);
+    apiOrigin = portal.apiOrigin;
+    const session = await openSession(deps2, portal, command, onRequest);
+    await ensureCapability(deps2, apiOrigin, "module.observability");
+    await ensureCapability(deps2, apiOrigin, "app.modules");
+    const am = await workspaceAppModules(session, portal, ws);
+    api = session.api;
+    ({ tenant } = am.app);
+    app = { id: am.app.id, slug: am.app.slug, name: am.app.name };
+    mods = await chooseModule(ctx, withRepo(am.modules), flags.module, o.single);
+    base = { portal: portal.builtin ?? portal.apiOrigin, tenant, app, source: WORKSPACE_FILE };
+  } else {
+    const mc = await moduleContextFor(ctx, { module: flags.module === "all" ? void 0 : flags.module }, command);
+    apiOrigin = mc.portal.apiOrigin;
+    await ensureCapability(deps2, apiOrigin, "module.observability");
+    app = await appFor(ctx, mc, flags.app);
+    api = mc.session.api;
+    tenant = mc.module.tenant;
+    if (flags.module === "all") {
+      if (o.single) throw new QoreError(
+        "QORE_CONTEXT_REQUIRED",
+        "A detail view needs one module",
+        { candidates: [{ kind: "module", id: mc.module.id, slug: mc.module.slug, name: mc.module.name }] }
+      );
+      await ensureCapability(deps2, apiOrigin, "app.modules");
+      const am = await api.get(`/api/cli/v1/apps/${encodeURIComponent(app.id)}/modules`);
+      mods = withRepo(am.modules);
+    } else {
+      mods = [mc.module];
+    }
+    base = contextJson(mc, app);
+    delete base.module;
+  }
+  await ensureCapability(deps2, apiOrigin, "module.status");
+  const env = await chooseEnv(ctx, api, mods[0].id, app.id, flags.env);
+  const fanOut2 = mods.length > 1 || flags.module === "all";
+  const targets = mods.map((m) => ({ module: { id: m.id, slug: m.slug, name: m.name, type: m.type, access: m.access }, client: new ObsClient(api, m.id, void 0, m.slug) }));
+  const where = fanOut2 ? "all modules" : mods[0].slug;
+  return {
+    targets,
+    fanOut: fanOut2,
+    env,
+    window,
+    header: `\u2192 ${tenant.name} / ${app.name} / ${where}  \xB7  ${env}  \xB7  ${windowText(window)}`,
+    json: { ...base, ...fanOut2 ? { modules: targets.map((t) => t.module) } : { module: targets[0].module }, env, window }
+  };
+}
+
+// src/cli/format.ts
+function ago(iso, now) {
+  if (!iso) return "\u2013";
+  const s = Math.max(0, Math.round((now.getTime() - new Date(iso).getTime()) / 1e3));
+  if (s < 60) return "just now";
+  if (s < 3600) return `${Math.floor(s / 60)}m ago`;
+  if (s < 86400) return `${Math.floor(s / 3600)}h ago`;
+  return `${Math.floor(s / 86400)}d ago`;
+}
+var pct = (f) => String(Number((f * 100).toFixed(2)));
+function uptime(h) {
+  if (!h) return "\u2013";
+  const kind = h.cause && h.kind !== "up" ? `${h.kind}: ${h.cause}` : h.kind;
+  return h.uptime24h === null ? kind : `${kind} (${pct(h.uptime24h)}% 24h)`;
+}
+function table(rows) {
+  const widths = rows[0].map((_, i) => Math.max(...rows.map((r) => (r[i] ?? "").length)));
+  return rows.map((r) => "  " + r.map((c, i) => i === r.length - 1 ? c : c.padEnd(widths[i])).join("  "));
+}
+
+// src/cli/observability/render.ts
+var CONTROL = /[\x00-\x08\x0b-\x1f\x7f\x80-\x9f]/g;
+var clean = (s) => s.replace(CONTROL, "");
+function fence(content) {
+  const lines = content.map(clean);
+  const longest = Math.max(0, ...lines.flatMap((l) => (l.match(/`+/g) ?? []).map((r) => r.length)));
+  const ticks = "`".repeat(Math.max(3, longest + 1));
+  return [`${ticks}untrusted-data`, ...lines, ticks];
+}
+function ms(n) {
+  return n < 1e3 ? `${Math.round(n)}ms` : `${(n / 1e3).toFixed(1)}s`;
+}
+var oneLine = (s) => clean((s ?? "").replace(/\s+/g, " ")).trim();
+function issuesTable(items, now, withModule) {
+  const head = ["ID", "LEVEL", "EVENTS", "USERS", "LAST SEEN", "TITLE"];
+  const rows = items.map((i) => [oneLine(i.shortId), oneLine(i.level), String(i.count), String(i.userCount), ago(i.lastSeen, now), oneLine(i.title)]);
+  return table(withModule ? [["MODULE", ...head], ...rows.map((r, n) => [oneLine(items[n].module.slug), ...r])] : [head, ...rows]);
+}
+function spansTable(items, now, withModule) {
+  const head = ["TRACE", "DURATION", "ROOT", "WHEN"];
+  const rows = items.map((s) => [oneLine(s.traceId), ms(s.durationMs), oneLine(s.transaction ?? s.description ?? s.name), ago(s.timestamp, now)]);
+  return table(withModule ? [["MODULE", ...head], ...rows.map((r, n) => [oneLine(items[n].module.slug), ...r])] : [head, ...rows]);
+}
+function logLines(items, withModule) {
+  return items.map((l) => [oneLine(l.timestamp), oneLine(l.severity).toUpperCase(), ...withModule ? [oneLine(l.module.slug)] : [], oneLine(l.message)].join(" "));
+}
+function spanTree(t) {
+  const all = [];
+  const walk = (n) => {
+    all.push(n);
+    n.children.forEach(walk);
+  };
+  t.roots.forEach(walk);
+  const slowest = all.reduce((a, n) => !a || n.end - n.start > a.end - a.start ? n : a, null);
+  const out = [];
+  const line2 = (n, depth) => {
+    const label3 = [oneLine(n.op), oneLine(n.description ?? n.transaction)].filter(Boolean).join(" ");
+    const errs = n.errors.map((e) => `\u2716 ${oneLine(e.shortId ?? e.eventId)}`).join(" ");
+    out.push([
+      `${"  ".repeat(depth)}${label3}`,
+      ms((n.end - n.start) * 1e3),
+      `[${oneLine(n.module.slug)}]`,
+      ...n === slowest ? ["\u25C0 slowest"] : [],
+      ...errs ? [errs] : []
+    ].join("  "));
+    n.children.forEach((c) => line2(c, depth + 1));
+  };
+  t.roots.forEach((r) => line2(r, 0));
+  return out;
+}
+var WARN = {
+  ingest_paused: "! This tenant's Sentry quota is reached; new events are not being recorded.",
+  no_trace_id: "! This error has no trace id, so there is no trace or trace logs to show.",
+  sort_unavailable: "! Sorting by duration is not available here; showing the slowest of the most recent matches.",
+  module_not_provisioned: "! Skipped, not reporting to Sentry yet:"
+};
+function warningLines(w, skipped = []) {
+  return [...new Set(w)].map((k) => k === "module_not_provisioned" ? `${WARN[k]} ${skipped.join(", ")}` : WARN[k]);
+}
+
+// src/cli/observability/flags.ts
+function addObsFlags(cmd) {
+  return cmd.option("--env <name>", "the environment (required; prompted when interactive)").option("--module <slug|all>", "the module (default: this repository); all = every module of the app").option("--app <slug|id>", "the app, when the module is part of several").option("--since <window>", "time window, e.g. 1h, 24h, 7d (default 24h)").option("--start <iso>", "window start (use with --end, instead of --since)").option("--end <iso>", "window end (use with --start, instead of --since)").option("--query <search>", "Sentry search syntax, appended to the filter").option("--limit <n>", "rows per module, 1-100 (default 25)");
+}
+function limitOf(s) {
+  if (s === void 0) return 25;
+  const n = Number(s);
+  if (!Number.isInteger(n) || n < 1 || n > 100) throw new QoreError("QORE_CONTEXT_INVALID", `--limit must be 1-100, not "${s}"`);
+  return n;
+}
+function withList(s, allowed) {
+  if (!s) return /* @__PURE__ */ new Set();
+  const parts = s.split(",").map((p) => p.trim()).filter(Boolean);
+  const bad = parts.filter((p) => !allowed.includes(p));
+  if (bad.length) throw new QoreError("QORE_CONTEXT_INVALID", `--with accepts ${allowed.join(", ")}; not ${bad.join(", ")}`);
+  return new Set(parts);
+}
+function one(flag, value, allowed) {
+  if (!allowed.includes(value)) {
+    throw new QoreError("QORE_CONTEXT_INVALID", `${flag} must be ${allowed.join("|")}, not "${value}"`);
+  }
+  return value;
+}
+async function fanOut(oc2, fn) {
+  const out = { results: [], skipped: [] };
+  let last;
+  for (const target of oc2.targets) {
+    try {
+      out.results.push({ target, result: await fn(target) });
+    } catch (e) {
+      if (oc2.targets.length < 2 || !(e instanceof QoreError) || e.serverCode !== NOT_PROVISIONED) throw e;
+      out.skipped.push({ id: target.module.id, slug: target.module.slug });
+      last = e;
+    }
+  }
+  if (out.results.length === 0 && last) {
+    throw new QoreError("QORE_RESOURCE_NOT_FOUND", "No module of this app reports to Sentry yet", {
+      serverCode: NOT_PROVISIONED,
+      details: { modules: out.skipped.map((m) => m.slug) }
+    });
+  }
+  return out;
+}
+var skipWarnings = (f) => f.skipped.length ? ["module_not_provisioned"] : [];
+var skipJson = (f) => f.skipped.length ? { unprovisionedModules: f.skipped } : {};
+function printWarnings(io2, w, json2, skipped = []) {
+  if (!json2) for (const l of warningLines(w, skipped.map((m) => m.slug))) io2.err(l);
+}
+
+// src/cli/commands/errors.ts
+var WITHS = ["trace", "logs"];
+var STATUSES = ["unresolved", "resolved", "all"];
+var SORTS = ["date", "freq", "new"];
+var MERGE = {
+  date: (a, b) => b.lastSeen.localeCompare(a.lastSeen),
+  freq: (a, b) => b.count - a.count,
+  new: (a, b) => b.firstSeen.localeCompare(a.firstSeen)
+};
+function printDetail(ctx, oc2, d, showIssue) {
+  const { io: io2 } = ctx;
+  printWarnings(io2, d.warnings, false);
+  if (showIssue) for (const l of fence(d.issue.markdown.split("\n"))) io2.out(l);
+  if (d.trace) {
+    io2.out("");
+    io2.out("Trace");
+    for (const l of fence(spanTree(d.trace))) io2.out(l);
+  }
+  if (d.logs) {
+    io2.out("");
+    io2.out(`Logs (${d.logs.length})`);
+    for (const l of fence(logLines(d.logs, oc2.fanOut))) io2.out(l);
+  }
+}
+async function interactiveDetail(ctx, oc2, c, id) {
+  const first = await errorDetail(c, id, { env: oc2.env, ...oc2.window }, /* @__PURE__ */ new Set());
+  printDetail(ctx, oc2, first, true);
+  const traceId = first.issue.event.traceId;
+  if (!traceId) return;
+  const scope2 = { env: oc2.env, ...oc2.window };
+  for (; ; ) {
+    const next = await ctx.io.select("Next?", [
+      { name: `Show trace ${oneLine(traceId).slice(0, 8)}`, value: "trace" },
+      { name: "Logs of this trace", value: "logs" },
+      { name: "Done", value: "done" }
+    ]);
+    if (next === "done") return;
+    const extra = { issue: first.issue, warnings: [] };
+    if (next === "trace") extra.trace = await c.trace(traceId, scope2);
+    else {
+      const p = await c.logs({ ...scope2, trace: traceId, limit: 100 });
+      extra.logs = p.items;
+      extra.warnings.push(...pageWarnings(p));
+    }
+    printDetail(ctx, oc2, extra, false);
+  }
+}
+function registerErrors(program, ctx) {
+  addObsFlags(program.command("errors [id]").description("Errors of a deployed environment, or one error with its stack trace (requires --env)")).option("--with <list>", `with an id: also show ${WITHS.join(",")}`).option("--status <status>", `${STATUSES.join("|")} (default unresolved)`).option("--sort <sort>", `${SORTS.join("|")} (default date)`).action(async (id, flags) => {
+    const { io: io2, deps: deps2 } = ctx;
+    const g = ctx.opts();
+    const withs = withList(flags.with, WITHS);
+    const status2 = one("--status", flags.status ?? "unresolved", STATUSES);
+    const sort = one("--sort", flags.sort ?? "date", SORTS);
+    const limit = limitOf(flags.limit);
+    const oc2 = await obsContext(ctx, flags, "errors", { single: id !== void 0 });
+    const q = { env: oc2.env, ...oc2.window, q: flags.query, limit };
+    if (id) {
+      const c2 = oc2.targets[0].client;
+      if (g.json) {
+        renderJson(io2, { context: oc2.json, ...await errorDetail(c2, id, q, withs) });
+        return;
+      }
+      io2.err(oc2.header);
+      if (io2.interactive && withs.size === 0) {
+        await interactiveDetail(ctx, oc2, c2, id);
+        return;
+      }
+      printDetail(ctx, oc2, await errorDetail(c2, id, q, withs), true);
+      return;
+    }
+    const f = await fanOut(oc2, (t) => t.client.issues({ ...q, status: status2, sort }));
+    const pages = f.results.map((r) => r.result);
+    const items = pages.flatMap((p) => p.items);
+    if (pages.length > 1) items.sort(MERGE[sort]);
+    const warnings = [...pageWarnings(...pages), ...skipWarnings(f)];
+    if (g.json) {
+      renderJson(io2, { context: oc2.json, items, warnings, ...skipJson(f) });
+      return;
+    }
+    io2.err(oc2.header);
+    printWarnings(io2, warnings, false, f.skipped);
+    if (items.length === 0) {
+      io2.out(`No ${status2 === "all" ? "" : `${status2} `}errors in ${oc2.env} (${windowText(oc2.window)}).`);
+      return;
+    }
+    for (const l of fence(issuesTable(items, deps2.now(), oc2.fanOut))) io2.out(l);
+    if (!io2.interactive) return;
+    const picked = await io2.select(
+      "Which error to open?",
+      [...items.map((i) => ({ name: `${oneLine(i.shortId)}  ${oneLine(i.title)}`.slice(0, 100), value: i })), { name: "(none)", value: null }]
+    );
+    if (!picked) return;
+    const c = oc2.targets.find((t) => t.module.id === picked.module.id)?.client;
+    if (!c) throw new QoreError("QORE_RESOURCE_NOT_FOUND", `module ${picked.module.slug} is not among the queried modules`);
+    await interactiveDetail(ctx, oc2, c, picked.shortId);
+  });
+}
+
 // src/cli/commands/init.ts
 import { realpath as realpath11 } from "fs/promises";
 
 // src/core/auth/oidc.ts
 import * as oc from "openid-client";
-var LOGIN_SCOPE = "openid profile email offline_access qore:read qore:local-env";
+var LOGIN_SCOPE = "openid profile email offline_access qore:read qore:local-env qore:observability";
 function decodeSub(accessToken) {
   const part = accessToken.split(".")[1] ?? "";
   const claims = JSON.parse(Buffer.from(part, "base64url").toString("utf8"));
@@ -5262,9 +5761,9 @@ async function createOidc(opts) {
     throw mapOidcError(e, host);
   }
   return {
-    async startDevice(scope) {
+    async startDevice(scope2) {
       try {
-        const r = await oc.initiateDeviceAuthorization(config, { scope });
+        const r = await oc.initiateDeviceAuthorization(config, { scope: scope2 });
         return {
           userCode: r.user_code,
           verificationUri: r.verification_uri,
@@ -5284,9 +5783,9 @@ async function createOidc(opts) {
         throw mapOidcError(e, host);
       }
     },
-    async refresh(rt, scope) {
+    async refresh(rt, scope2) {
       try {
-        const t = await oc.refreshTokenGrant(config, rt, scope ? { scope } : void 0);
+        const t = await oc.refreshTokenGrant(config, rt, scope2 ? { scope: scope2 } : void 0);
         return toTokenSet(t, rt);
       } catch (e) {
         throw mapOidcError(e, host);
@@ -5538,6 +6037,34 @@ function registerInit(program, ctx) {
   });
 }
 
+// src/cli/commands/logs.ts
+var LEVELS = ["error", "warn", "info", "debug"];
+function registerLogs(program, ctx) {
+  addObsFlags(program.command("logs").description("Logs of a deployed environment (requires --env)")).option("--level <level>", `exactly this severity: ${LEVELS.join("|")}`).option("--trace <id>", "only the logs of one trace").action(async (flags) => {
+    const { io: io2 } = ctx;
+    const g = ctx.opts();
+    const limit = limitOf(flags.limit);
+    const level = flags.level === void 0 ? void 0 : one("--level", flags.level, LEVELS);
+    const oc2 = await obsContext(ctx, flags, "logs", { single: false });
+    const q = { env: oc2.env, ...oc2.window, q: flags.query, limit, level, trace: flags.trace };
+    const f = await fanOut(oc2, (t) => t.client.logs(q));
+    const pages = f.results.map((r) => r.result);
+    const items = pages.flatMap((p) => p.items).sort((a, b) => b.timestamp.localeCompare(a.timestamp));
+    const warnings = [...pageWarnings(...pages), ...skipWarnings(f)];
+    if (g.json) {
+      renderJson(io2, { context: oc2.json, items, warnings, ...skipJson(f) });
+      return;
+    }
+    io2.err(oc2.header);
+    printWarnings(io2, warnings, false, f.skipped);
+    if (items.length === 0) {
+      io2.out(`No logs in ${oc2.env} (${windowText(oc2.window)}).`);
+      return;
+    }
+    for (const l of fence(logLines(items, oc2.fanOut))) io2.out(l);
+  });
+}
+
 // src/cli/commands/logout.ts
 function registerLogout(program, ctx) {
   program.command("logout").description("End the CLI session").option("--all", "log out of every portal").action(async (cmd) => {
@@ -5570,26 +6097,6 @@ function registerLogout(program, ctx) {
   });
 }
 
-// src/cli/format.ts
-function ago(iso, now) {
-  if (!iso) return "\u2013";
-  const s = Math.max(0, Math.round((now.getTime() - new Date(iso).getTime()) / 1e3));
-  if (s < 60) return "just now";
-  if (s < 3600) return `${Math.floor(s / 60)}m ago`;
-  if (s < 86400) return `${Math.floor(s / 3600)}h ago`;
-  return `${Math.floor(s / 86400)}d ago`;
-}
-var pct = (f) => String(Number((f * 100).toFixed(2)));
-function uptime(h) {
-  if (!h) return "\u2013";
-  const kind = h.cause && h.kind !== "up" ? `${h.kind}: ${h.cause}` : h.kind;
-  return h.uptime24h === null ? kind : `${kind} (${pct(h.uptime24h)}% 24h)`;
-}
-function table(rows) {
-  const widths = rows[0].map((_, i) => Math.max(...rows.map((r) => (r[i] ?? "").length)));
-  return rows.map((r) => "  " + r.map((c, i) => i === r.length - 1 ? c : c.padEnd(widths[i])).join("  "));
-}
-
 // src/cli/commands/status.ts
 var HEAD = ["ENV", "DEPLOY", "COMMIT", "DEPLOYED", "APP HEALTH"];
 var envRow = (e, now) => [e.name, e.paused ? "paused" : e.status, e.commit?.sha ?? "\u2013", ago(e.commit?.deployedAt ?? null, now), uptime(e.health)];
@@ -5631,7 +6138,7 @@ async function appStatus(ctx, ws, appFlag) {
 }
 function registerStatus(program, ctx) {
   program.command("status").description("Deployment and health per environment for this module (or, in a workspace root, the app)").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").option("--project <ref>", "the app or module, from anywhere (see qore init)").action(async (flags) => {
-    const c = await projectCtx(ctx, { ref: flags.project, module: flags.module, app: flags.app, needModule: false });
+    const c = await projectCtx(ctx, { ref: flags.project, module: flags.module, app: flags.app, needModule: false, command: "status" });
     const { deps: deps2, io: io2 } = c;
     const g = c.opts();
     if (!flags.module) {
@@ -5717,6 +6224,109 @@ function registerSync(program, ctx) {
   });
 }
 
+// src/cli/commands/traces.ts
+var WITHS2 = ["logs", "errors"];
+async function spansOf(c, q, sort, warnings) {
+  try {
+    return await c.spans({ ...q, sort });
+  } catch (e) {
+    if (sort === "-duration" && e instanceof QoreError && e.serverCode === "observability.sort_unsupported") {
+      warnings.push("sort_unavailable");
+      return c.spans(q);
+    }
+    throw e;
+  }
+}
+function registerTraces(program, ctx) {
+  addObsFlags(program.command("traces [id]").description("Slow or recent requests, or one trace as a span tree (requires --env)")).option("--slower-than <duration>", "only requests slower than this, slowest first (e.g. 500ms, 1s)").option("--with <list>", `with a trace id: also show ${WITHS2.join(",")}`).action(async (id, flags) => {
+    const { io: io2, deps: deps2 } = ctx;
+    const g = ctx.opts();
+    const withs = withList(flags.with, WITHS2);
+    const slower = flags.slowerThan === void 0 ? void 0 : parseDuration(flags.slowerThan);
+    const limit = limitOf(flags.limit);
+    const oc2 = await obsContext(ctx, flags, "traces", { single: id !== void 0 });
+    const q = { env: oc2.env, ...oc2.window, limit };
+    const scope2 = { env: oc2.env, ...oc2.window };
+    const printLogs = (items2) => {
+      io2.out("");
+      io2.out(`Logs (${items2.length})`);
+      for (const l of fence(logLines(items2, oc2.fanOut))) io2.out(l);
+    };
+    const printErrors = (items2) => {
+      io2.out("");
+      io2.out(`Errors (${items2.length})`);
+      for (const l of fence(issuesTable(items2, deps2.now(), oc2.fanOut))) io2.out(l);
+    };
+    const printTree = (trace2) => {
+      for (const l of fence(spanTree(trace2))) io2.out(l);
+    };
+    const more = async (c2, traceId, w) => {
+      const f2 = { ...scope2, trace: traceId };
+      if (w === "logs") {
+        const p = await c2.logs({ ...f2, limit: 100 });
+        printWarnings(io2, pageWarnings(p), false);
+        printLogs(p.items);
+      } else {
+        const p = await c2.issues({ ...f2, status: "all" });
+        printWarnings(io2, pageWarnings(p), false);
+        printErrors(p.items);
+      }
+    };
+    if (id) {
+      const c2 = oc2.targets[0].client;
+      const b = await traceDetail(c2, id, q, withs);
+      if (g.json) {
+        renderJson(io2, { context: oc2.json, ...b });
+        return;
+      }
+      io2.err(oc2.header);
+      printWarnings(io2, b.warnings, false);
+      printTree(b.trace);
+      if (b.logs) printLogs(b.logs);
+      if (b.errors) printErrors(b.errors);
+      return;
+    }
+    const warnings = [];
+    const listQ = { ...q, q: joinQuery(ROOT_SPAN_FILTER, slower && `span.duration:>${slower}`, flags.query) };
+    const sort = slower ? "-duration" : "-timestamp";
+    const f = await fanOut(oc2, (t) => spansOf(t.client, listQ, sort, warnings));
+    const pages = f.results.map((r) => r.result);
+    warnings.push(...pageWarnings(...pages), ...skipWarnings(f));
+    const items = pages.flatMap((p) => p.items).sort((a, b) => slower ? b.durationMs - a.durationMs : b.timestamp.localeCompare(a.timestamp));
+    const uniq = [...new Set(warnings)];
+    if (g.json) {
+      renderJson(io2, { context: oc2.json, items, warnings: uniq, ...skipJson(f) });
+      return;
+    }
+    io2.err(oc2.header);
+    printWarnings(io2, uniq, false, f.skipped);
+    if (items.length === 0) {
+      io2.out(`No ${slower ? `requests slower than ${slower}` : "traces"} in ${oc2.env} (${windowText(oc2.window)}).`);
+      return;
+    }
+    for (const l of fence(spansTable(items, deps2.now(), oc2.fanOut))) io2.out(l);
+    if (!io2.interactive) return;
+    const picked = await io2.select(
+      "Which trace to open?",
+      [...items.map((s) => ({ name: `${oneLine(s.traceId).slice(0, 8)}  ${oneLine(s.transaction ?? s.op)}`, value: s })), { name: "(none)", value: null }]
+    );
+    if (!picked) return;
+    const c = oc2.targets.find((t) => t.module.id === picked.module.id)?.client;
+    if (!c) throw new QoreError("QORE_RESOURCE_NOT_FOUND", `module ${picked.module.slug} is not among the queried modules`);
+    const { trace } = await traceDetail(c, picked.traceId, q, /* @__PURE__ */ new Set());
+    printTree(trace);
+    for (; ; ) {
+      const next = await io2.select("Next?", [
+        { name: "Logs of this trace", value: "logs" },
+        { name: "Errors in this trace", value: "errors" },
+        { name: "Done", value: "done" }
+      ]);
+      if (next === "done") return;
+      await more(c, picked.traceId, next);
+    }
+  });
+}
+
 // src/cli/commands/version.ts
 function registerVersion(program, ctx) {
   program.command("version").description("Show the CLI and portal version").action(async () => {
@@ -5785,6 +6395,9 @@ var COMMANDS = [
   registerWhoami,
   registerTenant,
   registerStatus,
+  registerLogs,
+  registerTraces,
+  registerErrors,
   registerEnv,
   registerRun,
   registerDev,
@@ -5844,13 +6457,13 @@ function createTelemetry(deps2, o) {
     },
     async end(signal) {
       if (!sdk) return { drained: true };
-      const ms = crashed ? flushMs.crash : flushMs.clean;
+      const ms2 = crashed ? flushMs.crash : flushMs.clean;
       const work = sdk.then(async (s) => {
         if (!s) return true;
         if (crashed) s.crash(crashed.e);
-        return s.end(ms);
+        return s.end(ms2);
       }).catch(() => false);
-      return { drained: await withDeadline(work, ms, signal) };
+      return { drained: await withDeadline(work, ms2, signal) };
     }
   };
 }
@@ -5871,7 +6484,7 @@ async function start(deps2, argv2, command, load, onScrub) {
   sdk.start();
   return sdk;
 }
-function withDeadline(work, ms, signal) {
+function withDeadline(work, ms2, signal) {
   if (signal?.aborted) return Promise.resolve(false);
   return new Promise((resolve6) => {
     const done = (v) => {
@@ -5880,7 +6493,7 @@ function withDeadline(work, ms, signal) {
       resolve6(v);
     };
     const onAbort = () => done(false);
-    const timer = setTimeout(() => done(false), ms);
+    const timer = setTimeout(() => done(false), ms2);
     signal?.addEventListener("abort", onAbort, { once: true });
     work.then(done, () => done(false));
   });
@@ -6508,7 +7121,7 @@ function systemProxy(platform = process.platform) {
 }
 
 // src/version.ts
-var VERSION = true ? "0.1.6" : "0.0.0-dev";
+var VERSION = true ? "0.1.7" : "0.0.0-dev";
 
 // src/cli.ts
 if (process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY) setGlobalDispatcher(new EnvHttpProxyAgent());
@@ -6586,4 +7199,4 @@ if (!drained) {
   process.exit();
 }
 //# sourceMappingURL=cli.js.map
-//# debugId=28c91dc8-dbb9-5c0a-91e3-f368931a4ed3
+//# debugId=bf813c0e-4054-532d-9e74-62fbe8673876

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quatronic/qore",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Qore developer CLI",
   "type": "module",
   "bin": {